113.22.152.139

Basic Info

City: Nha Trang

Region: Tinh Khanh Hoa

Country: Vietnam

Internet Service Provider: Dai IP Dong Su Dung Cho Ket Noi xDSL

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Unauthorized connection attempt detected from IP address 113.22.152.139 to port 445 [T]	2020-01-21 04:16:05

Comments on same subnet:

IP	Type	Details	Datetime
113.22.152.228	attack	Unauthorized connection attempt detected from IP address 113.22.152.228 to port 445	2019-12-20 20:23:05

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.22.152.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42764
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.22.152.139.			IN	A

;; AUTHORITY SECTION:
.			562	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012001 1800 900 604800 86400

;; Query time: 470 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 04:16:02 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 139.152.22.113.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.152.22.113.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
212.129.50.137	attackbots	[2020-04-10 09:39:06] NOTICE[12114] chan_sip.c: Registration from '"160"' failed for '212.129.50.137:6021' - Wrong password [2020-04-10 09:39:06] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-10T09:39:06.705-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="160",SessionID="0x7f020c08adb8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.50.137/6021",Challenge="7dc23c6f",ReceivedChallenge="7dc23c6f",ReceivedHash="4da648976afc98ea7a4cf90b8a295b92" [2020-04-10 09:40:19] NOTICE[12114] chan_sip.c: Registration from '"161"' failed for '212.129.50.137:6088' - Wrong password [2020-04-10 09:40:19] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-10T09:40:19.076-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="161",SessionID="0x7f020c08adb8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212 ...	2020-04-10 22:21:47
178.128.234.93	attackspam	Unauthorized connection attempt detected from IP address 178.128.234.93 to port 8083	2020-04-10 22:03:29
177.182.200.94	attackbots	Automatic report - Port Scan Attack	2020-04-10 22:32:40
104.239.175.202	attackspam	Lines containing failures of 104.239.175.202 Apr 10 02:40:41 neweola sshd[10412]: Invalid user foobar from 104.239.175.202 port 46826 Apr 10 02:40:41 neweola sshd[10412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.239.175.202 Apr 10 02:40:44 neweola sshd[10412]: Failed password for invalid user foobar from 104.239.175.202 port 46826 ssh2 Apr 10 02:40:45 neweola sshd[10412]: Received disconnect from 104.239.175.202 port 46826:11: Bye Bye [preauth] Apr 10 02:40:45 neweola sshd[10412]: Disconnected from invalid user foobar 104.239.175.202 port 46826 [preauth] Apr 10 02:51:40 neweola sshd[10868]: Invalid user randy from 104.239.175.202 port 35828 Apr 10 02:51:40 neweola sshd[10868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.239.175.202 Apr 10 02:51:42 neweola sshd[10868]: Failed password for invalid user randy from 104.239.175.202 port 35828 ssh2 Apr 10 02:51:43 neweola sshd[........ ------------------------------	2020-04-10 22:20:24
89.148.198.196	attackbotsspam	Automatic report - Port Scan Attack	2020-04-10 22:07:51
91.121.30.96	attackbotsspam	prod3 ...	2020-04-10 22:18:05
201.20.40.211	attackbotsspam	firewall-block, port(s): 445/tcp	2020-04-10 22:11:05
194.26.29.121	attackspam	04/10/2020-08:30:11.408256 194.26.29.121 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-04-10 22:12:50
62.234.95.148	attackbotsspam	Total attacks: 6	2020-04-10 21:54:50
210.227.113.18	attackbotsspam	2020-04-10T15:52:08.365972v22018076590370373 sshd[20769]: Invalid user test from 210.227.113.18 port 55008 2020-04-10T15:52:08.373538v22018076590370373 sshd[20769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18 2020-04-10T15:52:08.365972v22018076590370373 sshd[20769]: Invalid user test from 210.227.113.18 port 55008 2020-04-10T15:52:10.115421v22018076590370373 sshd[20769]: Failed password for invalid user test from 210.227.113.18 port 55008 ssh2 2020-04-10T15:56:10.686181v22018076590370373 sshd[19551]: Invalid user oracle from 210.227.113.18 port 53914 ...	2020-04-10 22:03:03
34.93.149.4	attackspambots	SSH brute force attempt	2020-04-10 22:25:51
183.3.222.51	attack	Unauthorized connection attempt from IP address 183.3.222.51 on Port 445(SMB)	2020-04-10 22:06:13
114.67.72.229	attackbots	Apr 10 14:38:34 mout sshd[5026]: Invalid user coupon from 114.67.72.229 port 55508	2020-04-10 22:30:56
111.67.206.4	attack	DATE:2020-04-10 14:09:55, IP:111.67.206.4, PORT:ssh SSH brute force auth (docker-dc)	2020-04-10 22:31:37
180.214.238.174	attackbotsspam	Apr 10 16:35:22 debian-2gb-nbg1-2 kernel: \[8788330.308678\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=180.214.238.174 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=45210 PROTO=TCP SPT=56679 DPT=3386 WINDOW=1024 RES=0x00 SYN URGP=0	2020-04-10 22:35:57

Recently Reported IPs

111.196.175.241	104.236.210.110	83.255.18.148	205.216.197.155
158.132.178.151	103.199.101.18	37.120.148.92	139.208.216.62
42.119.63.57	72.4.22.89	178.81.136.84	156.29.247.179
27.156.226.187	85.147.201.131	213.153.198.35	98.82.209.187
37.220.72.6	172.93.189.128	191.245.124.127	39.104.139.124